User Commands                                           roles(1)

NAME
     roles - print roles granted to a user

SYNOPSIS
     roles [ user...  ]

DESCRIPTION
     The command roles prints on standard output the roles
     that  you  or  the  optionally-specified user have been granted.
     Roles are special accounts that correspond to a functional
     responsibility rather than to an actual person (referred
     to as a normal user).

     Each user may have zero or more roles. Roles
     have most of the attributes of normal users, and are
     identified like normal users in passwd(4) and shadow(4).
     Each role must have an entry in the user_attr(4)
     file that identifies it as a role. Roles can have
     their own authorizations and profiles. See the man pages
     for auths(1) and profiles(1).

     Roles are not allowed to log into a system as a primary
     user. Instead, a user must login as him or herself and
     assume the role.  The actions of a role are attributable 
     to the normal user. When auditing is enabled, the audited
     events of the role contain the audit ID of the original
     user who assumed the role.

     Roles must have valid passwords and one of the shells
     that interprets profiles: either pfcsh, pfksh,
     or pfsh.  See the pfsh(1) man page.

     Role assumption may be performed using su(1M), rlogin(1),
     or some other service that supports the PAM_RUSER variable.
     Successful assumption requires knowedge of the role's
     password and membership in the role.
     Role assignments are specified in user_attr(4).

EXAMPLE
     An example of the roles command's output is shown here:

          example% roles tester01 tester02
          tester01 : admin
          tester02 : secadmin, root
          example%

FILES
     /etc/user_attr
     /etc/security/auth_attr
     /etc/security/prof_attr

ATTRIBUTES
     See attributes(5) for descriptions of the following attributes:

     __________________________________
    | ATTRIBUTE TYPE|  ATTRIBUTE VALUE|
    |__________________________________
    | Availability  |  SUNWcsu        |
    |_______________|_________________|

SEE ALSO
     auths(1), pfsh(1), profiles(1), getuserattr(3), user_attr(4), 
     auth_attr(4), attributes(5)